FEDORA-EPEL-2018-c887b5aaa9 — security update for pagure

pagure-5.0.1-2.el7

FEDORA-EPEL-2018-c887b5aaa9 created by ngompa a year ago for Fedora EPEL 7

unpushed

Rebase to Pagure 5.0.1 to move to a maintained Pagure version and fix CVE-2017-1002151, as well as many other issues.

Upstream changes with the rebase to 5.0.1:

The UI has been completely redesigned
Theming has been redesigned, and new themes are included as subpackages
Many new API endpoints have been added
Reworked how git hooks work to rely on a single file for efficiency
Expanded functionality included in the pagure-admin command

Consult the official Pagure documentation on upgrading to Pagure 5 from earlier versions.

This update has been submitted for testing by ngompa. a year ago

This update has obsoleted [pagure-2.10.1-1.el7](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cadc32892e), and has inherited its bugs and notes. a year ago

ngompa edited this update. a year ago

This update has been pushed to testing. a year ago

avij commented & provided feedback a year ago

karma

Requires python-celery, which is not available.

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe. a year ago

tis commented & provided feedback a year ago

karma

I found same dependency issue.

ngompa commented & provided feedback a year ago

python-celery is in Extras/Optional, so we can't ship it in EPEL.

ngompa commented & provided feedback a year ago

Hmm, I stand corrected. I don't know where celery comes from.

avij commented & provided feedback a year ago

[citation needed]

It does not seem to be mentioned in the JSON files in https://infrastructure.fedoraproject.org/repo/json/

Perhaps that's only in the upcoming RHEL 7.6? If not, what's the exact RHEL channel name?

ngompa commented a year ago

This update has been unpushed.

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

-2

Signed

Content Type

RPM

Test Gating

Builds

pagure-5.0.1-2.el7

Settings

Unstable by Karma

-3

Dates

submitted

a year ago

in testing

a year ago

modified

a year ago

BZ#1474269 CVE-2017-1002151 pagure: Private repositories accessible through ssh

BZ#1474270 CVE-2017-1002151 pagure: Private repositories accessible through ssh [epel-7]

BZ#1634318 pagure-5.0.1 is available

pagure-5.0.1-2.el7

Automated Test Results